Privacy and Data Protection

Privacy and Data Protection of E&H Chocoladen

Basically you can use our website without any personal data. If an affected person wishes to use our company's services via our website, personal data processing may be required. If the processing of personal data is required and there is no legal basis for such processing, we will always seek the consent of the data subject. The processing of personal data (such as the name, address, e-mail address or telephone number of a data subject) is always in accordance with the General Data Protection Regulation (GDPR) and in accordance with our country-specific privacy policy.

With the following privacy policy we would like to inform the public about the nature, extent and purpose of the personal data collected, used and processed by us. Likewise, data subjects are informed of their rights under this privacy policy. As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed via our website. Of course, each affected person may alternatively be e.g. transfer personal data by telephone.

Name and contact details of the controller

This privacy policy applies to data processing by:

E & H Chocoladen, represented by the owners Gunnar Heitmann and Frank Eckmüller, E-Mail: info eh-chocoladen.de, Phone: +49 331-20 11 087 For the completeness and accuracy of the product information and offers on the server of E & H held by E & H. The reproduction or takeover of the complete offer or parts thereof is only permitted in consultation with E & H.

Server-Logfiles

You can visit our websites without giving any personal information. Every time you access our website, usage data is transmitted through your Internet browser and stored in log data (server log files). This stored data includes e.g. Name of the called page, date and time of the call, amount of data transferred and the requesting provider. These data are used solely to ensure trouble-free operation of our website and to improve our offer. An assignment of this data to a specific person is not possible.

Customer account

When opening a customer account, we collect your personal data in the scope indicated there. The purpose of data processing is to improve your website browsing experience and simplify order processing. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You may revoke your consent at any time by notifying us without affecting the legality of the processing on the basis of the consent to revocation. Your customer account will be deleted afterwards.

Collection, processing and use of personal data for orders

When ordering, we collect and use your personal data only to the extent necessary to fulfill and process your order and to process your requests. The provision of the data is required for the conclusion of the contract. Non-provisioning means that no contract can be concluded. Processing is based on Art. 6 (1) lit. b GDPR and is required to fulfill a contract with you. A transfer of your data to third parties without your express consent is not. Excluded from this are only our service partners, which we need to process the contractual relationship or service providers of which we serve in the context of a processing order. In addition to the recipients named in the respective clauses of this privacy policy, these include, for example, recipients of the following categories: shipping service providers, payment service providers, merchandise management service providers, order processing service providers, web hosting providers, IT service providers and dropshipping retailers. In all cases, we strictly adhere to the legal requirements. The amount of data transmission is limited to a minimum.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or the Internet browser on the computer system of a user. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened. We use cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and offer you services. Some features of our website can not be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, based on Art. 6 (1) f GDPR.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can prevent the storage of cookies and transmission of the data contained therein. Already saved cookies can be deleted at any time. We point out, however, that you may not be able to use all the features of this website in full. The links below will tell you how to manage (and disable) cookies on major browsers:

• Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Collection and storage of personal data and the nature and purpose of their use

a) When visiting the website

You can basically use our website without revealing your identity. When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until automated deletion:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access takes place (referrer URL)
• used browser and, if applicable, the operating system of your computer as well as the name of your access provider

The data mentioned are processed by us for the following purposes:

• Ensuring a smooth connection setup of the website
• Ensuring comfortable use of our website
• Evaluation of system security and stability as well
• for further administrative purposes

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case we use the collected data for the purpose of drawing conclusions about you. In addition, we use cookies when visiting the website.

b) By using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on our website. It is necessary to provide a valid e-mail address so that we know who the request came from and to answer it. Further information can be provided voluntarily. It is up to you to decide whether you want to enter this information in the contact form. The data processing for the purpose of contacting us is in accordance with Art. 6 para. 1 p. 1 lit. a GDPR based on your voluntarily granted consent. The personal data collected by us for the use of the contact form will be automatically deleted after completion of the request made by you.

Using Google Maps

We use Google Inc.'s Embed Google Maps feature on our website (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; 'Google'). The feature allows the visual display of geographic information and interactive maps. In doing so, Google also collects, processes and uses data from the visitors to the pages in which GoogleMaps maps are integrated. For more information about Google's collection and use of data, please see the Google Privacy Policy at https://www.google.com/privacypolicy.html. There you can also change your settings in the privacy center so that you can manage and protect your data processed by Google. If necessary, your data will also be transmitted to the USA. There is an adequacy decision by the European Commission for data transfers to the US.

Disclosure of data

A transfer of your personal data to third parties for purposes other than those mentioned above does not take place. We will only share your personal information with third parties if:

• You your according to Art. 6 para. 1 p. 1 lit. a GDPR have given express consent to this
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data
• for transfer pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR there is a legal obligation
• this is legally permissible and according to Art. 6 para. 1 sentence 1 lit. b GDPR is required for the settlement of contractual relationships with you

As part of the ordering process, we will obtain your consent to share your information with third parties

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, based on Art. 6 (1) f GDPR

To do this, you must turn off the JavaScript application in your browser. We point out, however, that in this case you may not be able to use all functions of this website, such as the interactive map display, in full.

Duration of storage

After completion of the contract, the data are initially stored for the duration of the warranty period, then taking into account statutory, especially tax and commercial retention periods and then deleted after the deadline, unless you have agreed to further processing and use.

Rights of the person concerned

The following rights if the legal requirements are 15 to 20 GDPR article: right to information, correction, deletion, on restriction of processing on data portability. Also (1) GDPR you entitled to under article 21 a right of objection against the processing, GDPR f based on article 6 (1), as well as to the processing for the purpose of direct marketing.

Contact us on request. The contact data, see our imprint.

Right of appeal to the supervisory authority

You have in accordance with art. 77 GDPR a right to complain, by the supervisory authority if they believe that the processing of your personal data is not lawfully made.

Additional - 'Liability for links'

The E&H guarantees for the completeness and correctness of the information and offers on the server of E & H. Reproduction or acceptance of the entire offer or parts thereof is only permitted in consultation with E&H.

With the judgment of 12 May 1998 (Az. 312 O 85/98 - 'Liability for links') the regional court Hamburg decided that by the creation of a link the contents of the linked site have to be responsible.

According to the court, this can only be prevented by expressly distancing oneself from these contents. Since we have no influence on the design and contents of the linked pages, we expressly dissociate ourselves from their content.

Provision of content by the user

The user is responsible that no data, the publication and the availability of which violate license terms or against German or foreign copyrights, copyrings or copyrights, are made by him or using his access code. He notes that criminal prosecution by the injured party is possible.

The necessary documentation will be made available to find the cause of the damage. Provided that the user provides content in the service to which the user is entitled to use and disseminate the content, E&H also grants E&H the right to disseminate such content via the E&H servers or other media.

last update: 21.07.2018